Archive for the 'Security' Category


Major botnet building and the massive jump in spam

Thursday, November 9th, 2006

For a few months now (since the demise of bluefrog actually) I’ve noticed that the level of junk mail has gone up on my own mail server. Yes, I use spamassassin to filter and tag, but the volume of stuff that’s tagged has gone up (as well as the volume that slips through.) [...]

Popularity: 2% [?]

Wireless exploits coming to Metasploit 3…

Friday, October 27th, 2006

and the script kiddies rejoiced… It reads as though Metasploit 3 will make it easier than ever for script kiddies everywhere to take full advantage of the local wireless hotspots. Of course, metasploit has it’s good uses by people legitimately testing systems that they are responsible for, for vulnerabilities. But, it does [...]

Popularity: 1% [?]

Watching out for MORE fake video codecs

Wednesday, October 18th, 2006

sunbelt blog has yet MORE fake codec sites to watch out for. All are bad and should be AVOIDED… details after the jump….
Popularity: 2% [?]

Popularity: 2% [?]

Internet Explorer 7 final release - AND first vulnerability…

Wednesday, October 18th, 2006

Looks as though IE 7 release is imminent and will be in automatic updates on November 1st. Here’s one persons take on the user interface “improvements”. Now, there are many improvements in core functionality, but I’m annoyed by the user interface changes. I have spent quite a while with people getting use [...]

Popularity: 1% [?]

Massive Oracle quarterly patches

Wednesday, October 18th, 2006

If Microsoft patched 101 flaws in one release it would make big headlines - so this deserves some headlines too…. more coverage at incidents.org
Popularity: 1% [?]

Popularity: 1% [?]

Would you like spyware with that? Apple too….

Tuesday, October 17th, 2006

These stories come up from time to time. A free giveaway of some sort and it turns out that there’s spyware or a virus embedded, company gives a big “whoops” and fixes things by replacing them…. McDonalds had a promotion going where up to 10,000 people could win a flash based mp3 player [...]

Popularity: 2% [?]

*Nix Nvidia binary root exploit

Tuesday, October 17th, 2006

There appears to be a working root exploit against the binary NVidia driver for *nix based systems. It’s reported at kerneltrap.org It was resolved a few weeks back by the release of version 1.0-9625 of the Nvidia binary graphic driver. Linux has been primarily mentioned in these stories, but likely other Unixes [...]

Popularity: 1% [?]

Exploit Thursday - this months winner - Powerpoint

Thursday, October 12th, 2006

The SecurityFix reminds us of what usually comes close behind Patch Tuesday…. exploit Wednesday or Thursday and this month, the exploits seemed to start coming out Thursday. There’s a new Powerpoint exploit starting to make the rounds right on the heels of Patch day. The main goal is likely to get the most [...]

Popularity: 1% [?]

The problems with cache servers

Thursday, October 12th, 2006

Networkworld brings us this report that exploit code removed from websites can live on for quite a while in caching servers. Which, in a way is NOT news, but it’s worth remembering. Many times when someone visits a website, their really visiting a caching proxy server that has previously grabbed a copy of [...]

Popularity: 1% [?]

What wasn’t patched Tuesday…

Thursday, October 12th, 2006

Sunbelt reminds us that the daxctle.ocx exploit was NOT among those patched Tuesday by Microsoft. They remind us of the following workaround…
Mitigation: The DirectAnimation Path control can be disabled by setting the kill bit for the following CLSID: {D7A7D7C3-D47F-11d0-89D3-00A0C90833E6}
More info at Microsoft’s Knowledge Base
Popularity: 1% [?]

Popularity: 1% [?]

Google
 
Web www.averyjparker.com

Internet Storm Center Infocon Status